The UK's communications regulator is proposing a rule to ban carriers from selling phones that are tied to their networks. From a report: O2, Sky, Three, Virgin Mobile and some smaller carriers already offer unlocked phones, but Ofcom wants the likes of BT Mobile/EE, Tesco Mobile and Vodafone to do the same. It's also seeking better clarity for customers about whether their handset is locked. While O2, Virgin and Three previously sold locked devices, they switched to unlocked phones in recent years. BT Mobile, on the other hand, sold unlocked devices until February 2018, at which point it switched to a locked device policy, akin to sibling network EE.

Microsoft quietly released some new documentation recently, detailing how the company plans to launch its new Chrome-based Microsoft Edge browser. From a report: The company has been working on this new browser for a little while, and we are less than a month away from the public release. [...] The changes here are pretty obvious, but it is still important to understand exactly how Microsoft is going to replace the older Edge browser on a technical level. Microsoft says it has already made changes to Windows 10 and the older Edge browser to support the migration.

All start menu pins, tiles, and shortcuts for the current version of Microsoft Edge will migrate to the next version of Microsoft Edge.
All taskbar pins and shortcuts for the current version of Microsoft Edge will migrate to the next version of Microsoft Edge.
The next version of Microsoft Edge will be pinned to the taskbar. If the current version of Microsoft Edge is already pinned, it will be replaced.
The next version of Microsoft Edge will add a shortcut to the desktop. If the current version of Microsoft Edge already has a shortcut, it will be replaced.
Most protocols that Microsoft Edge handles by default will be migrated to the next version of Microsoft Edge.
Current Microsoft Edge will be hidden from all UX surfaces in the OS, including settings, all apps, and any file or protocol support dialogs.
All attempts to launch the current version of Microsoft Edge will redirect to the next version of Microsoft Edge.

History may not look kindly upon it, but the 2010s really was the decade of Facebook. From a report: A new report from analytics firm App Annie revealed the top 10 most downloaded mobile apps of the decade, and Facebook has an unsurprising grip on the whole operation. Facebook, Messenger, WhatsApp, and Instagram were the four most downloaded apps across Android and iOS in the 2010s, and all four come from the same company. It is, if nothing else, a clear view of just how much Facebook dominated our daily lives from 2010 to 2019. Its flagship app and Messenger spin-off both have user counts in the billions, while Instagram and WhatsApp are household names.

An anonymous reader quotes a report from The Guardian: A landmark legal case has been launched against the world's largest tech companies by Congolese families who say their children were killed or maimed while mining for cobalt used to power smartphones, laptops and electric cars, the Guardian can reveal. Apple, Google, Dell, Microsoft and Tesla have been named as defendants in a lawsuit filed in Washington DC by human rights firm International Rights Advocates on behalf of 14 parents and children from the Democratic Republic of the Congo (DRC). The lawsuit accuses the companies of aiding and abetting in the death and serious injury of children who they claim were working in cobalt mines in their supply chain. The families and injured children are seeking damages for forced labour and further compensation for unjust enrichment, negligent supervision and intentional infliction of emotional distress. Since cobalt is used in the rechargeable lithium batteries used in millions of products sold by these tech companies, the lawsuit argues that they all aided and abetted the mining companies that profited from the labor of children who were forced to work in dangerous conditions -- conditions that ultimately led to death and serious injury.

"The court papers claim that Apple, Dell, Microsoft, Google and Tesla all have the authority and resources to supervise and regulate their cobalt supply chains and that their inability to do so contributed to the deaths and injuries suffered by their clients," reports The Guardian. The lawsuit says children were working illegally at a mine owned by UK mining company Glencore, which sold cobalt to Umicore, a Brussels-based metal and mining trader, which then sold battery-grade cobalt to several of the tech companies. Several other mines mentioned in the lawsuit are owned by Zhejiang Huayou Cobalt, a major Chinese cobalt firm, which also supplies several tech companies.

Rewound, the basic music player app released last week that you could skin to make your iPhone look remarkably like an iPod Classic, has been pulled from the App Store, according to Rewound blog post published on Medium. The Verge reports: The blog says that Apple pulled the app because it copied the iPod's design, charged for Apple Music features, and people could mistake the app for an Apple product. The blog makes the case that the app had a pretty basic interface that looked nothing like an Apple app, and the iPod classic skins didn't come preinstalled. (You had to download them after you had already installed the app.) We've asked Apple for comment, and we'll update this story when we hear back.

The Rewound blog says the iOS app can't be updated without "breaking the app for all 170,000+ users," but the developer, Louis Anslow, says he will attempt to bring the app back in some way. On a GoFundMe page for continued development of Rewound, Anslow says he will "try some tweaks to get Rewound resubmitted" on the App Store and that the GoFundMe will help support development of a web app and an Android app. On the GoFundMe page, Anslow says it "isn't clear if Apple will ever allow Rewound back on the [App Store]," and states that "we are not promising fully finished versions" of any of the apps.

Visa has issued a statement warning consumers that cybercriminals are actively exploiting a weakness in gas station point-of-sale (POS) networks to steal credit card data. Engadget reports: The company's fraud disruption teams are investigating several incidents in which a hacking group known as Fin8 defrauded fuel dispenser merchants. In each case, the attackers gained access to the POS networks via malicious emails and other unknown means. They then installed POS scraping software that exploited the lack of security with old-school mag stripe cards that lack a PIN code.

The hack doesn't appear to affect more secure chip-and-pin cards, but not all consumers have those, so service stations often work with mag stripe readers, too. The data is apparently sent in an unencrypted form to the vendor's main network, where the thieves have figured out how to intercept it. The other problem is that the POS systems aren't firewalled off from other, less critical parts of the network, allowing thieves to gain lateral access once the network is breached. There's not much cardholders can do to avoid the attacks, but Visa has advised fuel merchants to encrypt data while it's transferred or use a chip-and-PIN policy.

New Jersey's largest hospital system said that it has paid hackers a ransom after a ransomware attack disrupted its services earlier this month. Threatpost reports: Hackensack Meridian Health, a $6 billion non-profit health provider system based in Edison, N.J., operates 17 hospitals, nursing homes and outpatient centers, as well as psychiatric facility Carrier Clinic. The hospital system told media outlets on Friday that it was targeted by a cyberattack on Dec. 2, crippling its computer software systems for nearly five days. "Our network's primary clinical systems are operational, and our IT teams continue working diligently to bring all applications back online safely," according to a statement issued to media, Friday. "Based on our investigation to date, we have no indication that any patient or team-member information has been subject to unauthorized access or disclosure."

The attack affected the hospital's computer software systems, from scheduling and billing systems to labs and radiology, according to reports. Consequently, the ransomware attack forced the hospitals that were part of Hackensack Meridian Health system to reschedule around 100 non-emergency appointments and surgeries earlier in December. The hospital system did not clarify how much ransom it paid, or whether its data has since been recovered. It also did not give further indication about how systems were first infected and what data was affected.

An anonymous reader quotes a report from Bloomberg: A nuclear fusion start-up backed by billionaire Jeff Bezos raised more than $100 million to help design and build a demonstration power plant. The company lined up $65 million in Series E financing led by Singapore's Temasek Holdings Pte, and is getting another $38 million from Canada's Strategic Innovation Fund, General Fusion Inc. said in a statement Monday. It's now attracted more than $200 million in financing.

Canada-based General Fusion is one of about two dozen companies seeking to commercialize nuclear fusion technology. It relies on the same process that powers stars, generating huge amounts of energy by fusing small atoms into larger ones. While it holds out the promise of cheap, carbon-free energy, researchers have been working for decades to overcome significant technical hurdles. Firms pursuing such designs are hoping they can start generating power sooner than the 35-nation, $25 billion Tokamak fusion reactor known as ITER. Collaborators on that facility -- the largest research project in history -- have been laboring on a gigantic demonstration reactor in France since 2010.

Tablizer writes: Microsoft still dominates cubicle-land. Google is making a push into that domain, but it's unclear how far or how fast they can go. Most "serious" applications still run on only Windows and that doesn't seem to be changing much. What's keeping others out? Do we need new desktop-oriented, cross-platform standards? It seems everyone "went web" and forgot about the desktop niche, but it's a big niche still.

schwit1 shares a report from The Wall Street Journal: Amazon.com is blocking its third-party sellers from using FedEx's ground delivery network for Prime shipments, citing a decline in performance heading into the final stretch of the holiday shopping season. The ban on using FedEx's Ground and Home services starts this week and will last "until the delivery performance of these ship methods improves," according to an email Amazon sent Sunday to merchants that was reviewed by The Wall Street Journal. Amazon has stopped using FedEx for its own deliveries in the U.S., but third-party merchants had still been able to use FedEx. Such sellers now account for more than half of the merchandise sold on Amazon's website, including many items listed as eligible for Prime.

FedEx said the decision impacts a small number of shippers but "limits the options for those small businesses on some of the highest shipping days in history." The carrier said it still expects to handle a record number of packages this holiday season. "The overall impact to our business is minuscule," a FedEx spokeswoman said. In its email to merchants, Amazon said sellers can use FedEx's speedier and more expensive Express service for Prime orders or FedEx Ground for non-Prime shipments.

An anonymous reader quotes a report from Ars Technica: ICANN is reviewing the pending sale of the .org domain manager from a nonprofit to a private equity firm and says it could try to block the transfer. The .org domain is managed by the Public Internet Registry (PIR), which is a subsidiary of the Internet Society, a nonprofit. The Internet Society is trying to sell PIR to private equity firm Ethos Capital. ICANN (Internet Corporation for Assigned Names and Numbers) said last week that it sent requests for information to PIR in order to determine whether the transfer should be allowed. "ICANN will thoroughly evaluate the responses, and then ICANN has 30 additional days to provide or withhold its consent to the request," the organization said.

ICANN, which is also a nonprofit, previously told the Financial Times that it "does not have authority over the proposed acquisition," making it seem like the sale was practically a done deal. But even that earlier statement gave ICANN some wiggle room. ICANN "said its job was simply to 'assure the continued operation of the .org domain' -- implying that it could only stop the sale if the stability and security of the domain-name infrastructure were at risk," the Financial Times wrote on November 28. In its newer statement last week, ICANN noted that the .org registry agreement between PIR and ICANN requires PIR to "obtain ICANN's prior approval before any transaction that would result in a change of control of the registry operator." The registry agreement lets ICANN request transaction details "including information about the party acquiring control, its ultimate parent entity, and whether they meet the ICANN-adopted registry operator criteria (as well as financial resources, and operational and technical capabilities)," ICANN noted. ICANN's 30-day review period begins after PIR provides those details.

ICANN said it will apply "a standard of reasonableness" when determining whether to allow the change in control over the .org domain, but it "might ultimately have to be determined by the courts," notes Domain Name Wire.

An anonymous reader quotes the Wall Street Journal: Boeing Co. is considering either suspending or cutting back production of the 737 MAX amid growing uncertainty over the troubled plane's return to service and could disclose a decision as soon as Monday, according to people familiar with the matter.

Boeing management increasingly sees pausing production as the most viable among difficult options as the plane maker's board began a meeting Sunday in Chicago, these people said. Support for halting production comes days after U.S. regulators warned the aerospace giant it had been setting unrealistic expectations for when the jet would be allowed to fly again, these people said.
Boeing has already "signaled to U.S. aviation officials last week that it anticipates a production-related announcement this week amounting to at least a significant rollback of MAX output," the Journal reports, citing a source "familiar with the matter."

Updated on Monday, 21:45 GMT: WSJ and other media outlets are now reporting that Boeing will suspend the production of 737 Max aircraft next month.

Billionaire Dallas Mavericks owner Mark Cuban is selling one of his sports-technology investments to the owners of the Los Angeles Dodgers. From a report: Atrium Sports, a technology company backed by Todd Boehly and other Dodgers owners, has acquired data and video analytics company Synergy Sports Technology, in which Cuban is the biggest investor, the companies said Monday. Synergy provides its analytics tools to a number of National Basketball Association franchises, as well as Major League Baseball and college basketball and baseball clubs. Boehly is chairman of Eldridge Industries, which made the lead investment in the Synergy transaction. Elysian Park Ventures, which includes Boehly and fellow Dodgers owners Mark Walter, Magic Johnson and Peter Guber, also invested. Financial terms weren't disclosed, but a person familiar with the transaction said the total purchase price was about $90 million.

Google has told its Turkish business partners it will not be able to work with them on new Android phones to be released in Turkey, after the Turkish competition board ruled that changes Google made to its contracts were not acceptable. From a report: Turkey's competition authority had fined Google 93 million lira ($17.4 million) in September 2018 for violating competition law with its mobile software sales. The company was given six months to make changes to restore competition. Turkey's competition board ruled on Nov. 7 that changes which Google made in its contracts with its business partners in line with the board's demands were inadequate as they still did not allow changes to the default search engine.

Apple says it goes out of its way to protect the safety and security of its young users. The App Store of 2019 tells a different story. Laura June, writing for InputMag: One of the most insidious forms of abuse on modern content platforms is the way unknown creators can co-opt well-known characters. Off-brand Spider-Man and fake Elsa and Anna pop up all over YouTube. I discovered this the hard way two years ago, when I found my daughter watching fake Peppa Pig videos on YouTube, many of them horrific and violent, and preying on the very young (Peppa Pig is a very popular television show for preschoolers). But YouTube, unlike Apple's App Store, is a platform where pretty much anyone can upload anything. And Google, which owns YouTube, doesn't peacock on stage like Tim Cook does, looking down his nose at Facebook and other companies for their lax attitudes on user safety. Given Apple's reputation, it was with some surprise that I found myself in a very similar position several weeks ago, while browsing Apple's App Store for games for my nearly 6-year-old daughter.

[...] Keep in mind, I was not looking for fakes. I fully expected to find only official apps for these company's characters. I didn't expect to find Paw Puppy Smashy Patrol in the store above the official Nickelodeon app PAW Patrol Pup Rescue Pack. Some apps boldly use the official Disney characters in their titles, literally advertising themselves with the copyrighted, intellectual property of a currently airing Disney show. But even the ones that aren't using Disney names in their titles depict characters that look nearly identical to Vampirina, Elsa and Anna, Sofia the First, and so on. The quality of the design varies, but some of them really do feature characters who look exactly like the ones you've come to know and trust (even if they've not-so-cleverly disguised themselves with names like Paw Puppy Smashy Patrol and Ice Queen Adventure). The apps are designed to fool you; fooling you is the goal. They're designed to make you think, "Oh right, Disney! We love Disney, we trust Disney. Let me download that for you, kid!"

"ICANN has delayed its approval of the sale of .Org to private equity company Ethos Capital by requesting more information," reports Domain Name Wire: According to its contract with Public Interest Registry (PIR) to run .org, ICANN had 30 days from when PIR notified it of the transaction to request more information. It has now done so. After it receives the responses, it has 30 days to either approve or withhold its consent of the registry transfer.
The Register recently published two articles criticizing ICANN's "opaque decision-making," while the General Counsel for ICANN has sent a letter to the CEOs of both PIR and ISOC saying they're also "uncomfortable" with the lack of transparency.

ICANN is requesting information "related to the continuity of the operations of the .ORG registry, the nature of the proposed transaction, how the proposed new ownership structure would continue to adhere to the terms of our current agreement with Public Internet Registry, and how they intend to act consistently with their promises to serve the .ORG community with more than 10 million domain name registrations...

"We acknowledge the questions and concerns that are being raised and directed to ISOC, PIR, and ICANN relating to this change. To ease those concerns and maintain trust in the .ORG community, we urge PIR, ISOC, and Ethos Capital to act in an open and transparent manner throughout this process...

"ICANN takes its responsibility in evaluating this proposed transaction very seriously. We will thoughtfully and thoroughly evaluate the proposed acquisition to ensure that the .ORG registry remains secure, reliable, and stable."

America's Air Force is seeking proposals for technologies "for operations far beyond geosynchronous Earth orbit, near the moon's orbit," reports SpaceNews: Specific items the Air Force wants: payloads for providing space domain awareness from the lunar surface, lightweight sensors for space-based space domain awareness, and methodologies for orbit determination and catalog maintenance in cislunar space. The Air Force also is interested in concepts for providing position, navigation and timing solutions for cislunar space operations; visualization of cislunar orbits; and terrestrial-based concepts for achieving space domain awareness of cislunar space.

The inclusion of cislunar space capabilities in the Small Business Innovation Research program was unexpected, said Shawn Usman, an astrophysicist and founder of the space consulting firm Rhea Space Activity. The industry sees this as a sign that the Air Force, and the future Space Force, are responding to advances made by China, Usman told SpaceNews. "This is definitely a pretty big turning point for the U.S. Air Force, the U.S. 'new space' industry, our near-peer competitors, and for the upcoming Space Force."

Chrome 79 is creating an issue with WebView (the Android component that allows apps to display content from the web), reports 9to5Google: On Friday morning, Android developers reliant on WebView and local storage began encountering an issue where their apps lost data after users updated to version 79 of WebView. Those affected took to Chromium's bug tracker, and have described the incident as a "catastrophe" and "major issue." To end users, it's as if apps were entirely reset and just downloaded for the first time. This includes saved data disappearing or being logged out. Given the level of system opacity, most will blame developers for a problem that's out of their hands.

By that afternoon, Google engineers responded and isolated the issue to "profile layout changes" where "local storage was missed off the list of files migrated." A member of the Chromium team apologized Saturday morning, with the Chrome/WebView rollout halted after 50% of devices already received the update. At the highest priority level (P0), Google is currently "working on a solution that minimizes the data loss, and that can be rolled out safely." The last guidance for a patch is 5-7 days.

"The Federal Communications Commission voted unanimously Thursday to push a plan forward that would take away several channels of airwaves from automakers and local governments that have been planning to build out a communication network for cars and surrounding smart infrastructure," writes Consumer Reports, in an article shared by McGruber.

"The 5-0 commission vote indicated how much ground the auto industry has lost in protecting the airwaves that have been reserved since 1999 as a so-called safety spectrum." The industry and some state and local governments have been counting on it to deliver vehicle-to-everything communications, or V2X, that could improve safety and also help in the development of self-driving-car technology... The FCC plan would all but kill an approach to V2X that relies on short-range radio, called DSRC, that has been deployed by local governments at some 100 test sites around the country, safety advocates say. That could mean hundreds of millions of dollars in taxpayer-funded local investments into smart traffic lights and other smart road technology would be wasted, according to state officials. The FCC plan would divide 75 MHz of the safety spectrum between WiFi and auto safety applications. The FCC proposal allocates 20 MHz for a newer V2X technology, known as C-V2X, and leaves 10 MHz for either C-V2X or DSRC.

All five FCC commissioners spoke about the vast economic potential of more airwaves dedicated to WiFi, and said not enough had happened with the V2X technology to continue to set aside so much spectrum for its exclusive use.

Republican Commissioner Michael O'Rielly said some opponents of the FCC plan might say the move puts vehicle safety in jeopardy or will lead to increased fatalities. "That is pure gibberish," O'Rielly said at the hearing. "Everyone on this dais wants our families, friends, neighbors, countrymen, and countrywomen to be safe when traveling in motor vehicles. DSRC hasn't come anywhere close to fruition." Democratic Commissioner Jessica Rosenworcel said other countries were dedicating less than 75 MHz to V2X applications, and the 10 MHz that could be available for DSRC in the FCC plan matches what Japan is doing.
The article concludes that the commission "will collect and analyze public comments over the next several months before any plan becomes final.

"But the comments of the commissioners and FCC staff left little doubt about the direction the agency is moving in.

"If you're systematically stealing money from a bank vault, it may not be a good idea to post the evidence on your social media pages," reports CNN: A bank employee in Charlotte, North Carolina, allegedly stole $88,000 from the bank's vault, according to a release from the United States Attorney's Office Western District of North Carolina. And he wasn't bashful about advertising to his social media followers the life of luxury he was funding.... Henderson's numerous Facebook and Instagram photos depict him posing with stacks of cash, and the U.S. Attorney's Office says he used the money to make a $20,000 down payment on a new Mercedes-Benz....

According to details from the indictment contained in the release, Henderson allegedly took bank customers' cash deposits out of the bank vault for months. Many of those times, he deposited money into an ATM near the bank where he worked, according to the release. "I make it look easy but this shyt really a PROCESS," he wrote in one Facebook post, part of a string in which he talked about building his "brand." That post, showed him him holding a stack of money and smoking a cigarette.
Henderson is now facing up to 30 years in prison.

Which bank? According to the Charlotte Observer, it was Wells Fargo.